Proving it before cutover: fuzzing, the benchmark gate against the TypeScript relay, the 72-hour soak and the independent security review (#868).